Migrate config to cameleer.server.* naming convention

Move all configuration properties under the cameleer.server.* namespace
with all-lowercase dot-separated names and mechanical env var mapping
(dots→underscores, uppercase). This aligns with the agent's convention
(cameleer.agent.*) and establishes a predictable pattern across all
components.

Changes:
- Move 6 config prefixes under cameleer.server.*: agent-registry,
  ingestion, security, license, clickhouse, and cameleer.tenant/runtime/indexer
- Rename all kebab-case properties to concatenated lowercase
  (e.g., bootstrap-token → bootstraptoken, jar-storage-path → jarstoragepath)
- Update all env vars to CAMELEER_SERVER_* mechanical mapping
- Fix container-cpu-request/container-cpu-shares mismatch bug
- Remove displayName from AgentRegistrationRequest (redundant with instanceId)
- Update agent container env vars to CAMELEER_AGENT_* convention
- Update K8s manifests and CI workflow for new env var names
- Update CLAUDE.md, HOWTO.md, SERVER-CAPABILITIES.md documentation

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

cameleer3-server-app/src/main/resources/application.yml

@@ -7,7 +7,7 @@ spring:
       max-file-size: 200MB
       max-request-size: 200MB
   datasource:
-    url: ${SPRING_DATASOURCE_URL:jdbc:postgresql://localhost:5432/cameleer3?currentSchema=tenant_${cameleer.tenant.id}}
+    url: ${SPRING_DATASOURCE_URL:jdbc:postgresql://localhost:5432/cameleer3?currentSchema=tenant_${cameleer.server.tenant.id}}
     username: ${SPRING_DATASOURCE_USERNAME:cameleer}
     password: ${SPRING_DATASOURCE_PASSWORD:cameleer_dev}
     driver-class-name: org.postgresql.Driver
@@ -24,60 +24,61 @@ spring:
     deserialization:
       fail-on-unknown-properties: false
 
-agent-registry:
-  heartbeat-interval-ms: 30000
-  stale-threshold-ms: 90000
-  dead-threshold-ms: 300000
-  ping-interval-ms: 15000
-  command-expiry-ms: 60000
-  lifecycle-check-interval-ms: 10000
-
-ingestion:
-  buffer-capacity: 50000
-  batch-size: 5000
-  flush-interval-ms: 5000
-
 cameleer:
-  tenant:
-    id: ${CAMELEER_TENANT_ID:default}
-  runtime:
-    enabled: ${CAMELEER_RUNTIME_ENABLED:true}
-    jar-storage-path: ${CAMELEER_JAR_STORAGE_PATH:/data/jars}
-    base-image: ${CAMELEER_RUNTIME_BASE_IMAGE:cameleer-runtime-base:latest}
-    docker-network: ${CAMELEER_DOCKER_NETWORK:cameleer}
-    agent-health-port: 9464
-    health-check-timeout: 60
-    container-memory-limit: ${CAMELEER_CONTAINER_MEMORY_LIMIT:512m}
-    container-cpu-shares: ${CAMELEER_CONTAINER_CPU_SHARES:512}
-    routing-mode: ${CAMELEER_ROUTING_MODE:path}
-    routing-domain: ${CAMELEER_ROUTING_DOMAIN:localhost}
-    server-url: ${CAMELEER_SERVER_URL:}
-    jar-docker-volume: ${CAMELEER_JAR_DOCKER_VOLUME:}
-  body-size-limit: ${CAMELEER_BODY_SIZE_LIMIT:16384}
-  indexer:
-    debounce-ms: ${CAMELEER_INDEXER_DEBOUNCE_MS:2000}
-    queue-size: ${CAMELEER_INDEXER_QUEUE_SIZE:10000}
-
-license:
-  token: ${CAMELEER_LICENSE_TOKEN:}
-  file: ${CAMELEER_LICENSE_FILE:}
-  public-key: ${CAMELEER_LICENSE_PUBLIC_KEY:}
-
-security:
-  access-token-expiry-ms: 3600000
-  refresh-token-expiry-ms: 604800000
-  bootstrap-token: ${CAMELEER_AUTH_TOKEN:}
-  bootstrap-token-previous: ${CAMELEER_AUTH_TOKEN_PREVIOUS:}
-  ui-user: ${CAMELEER_UI_USER:admin}
-  ui-password: ${CAMELEER_UI_PASSWORD:admin}
-  ui-origin: ${CAMELEER_UI_ORIGIN:http://localhost:5173}
-  jwt-secret: ${CAMELEER_JWT_SECRET:}
-  oidc-issuer-uri: ${CAMELEER_OIDC_ISSUER_URI:}
-  oidc-jwk-set-uri: ${CAMELEER_OIDC_JWK_SET_URI:}
-  oidc-audience: ${CAMELEER_OIDC_AUDIENCE:}
-  oidc-tls-skip-verify: ${CAMELEER_OIDC_TLS_SKIP_VERIFY:false}
-  cors-allowed-origins: ${CAMELEER_CORS_ALLOWED_ORIGINS:}
-
+  server:
+    tenant:
+      id: ${CAMELEER_SERVER_TENANT_ID:default}
+    agentregistry:
+      heartbeatintervalms: 30000
+      stalethresholdms: 90000
+      deadthresholdms: 300000
+      pingintervalms: 15000
+      commandexpiryms: 60000
+      lifecyclecheckintervalms: 10000
+    ingestion:
+      buffercapacity: 50000
+      batchsize: 5000
+      flushintervalms: 5000
+      bodysizelimit: ${CAMELEER_SERVER_INGESTION_BODYSIZELIMIT:16384}
+    runtime:
+      enabled: ${CAMELEER_SERVER_RUNTIME_ENABLED:true}
+      jarstoragepath: ${CAMELEER_SERVER_RUNTIME_JARSTORAGEPATH:/data/jars}
+      baseimage: ${CAMELEER_SERVER_RUNTIME_BASEIMAGE:cameleer-runtime-base:latest}
+      dockernetwork: ${CAMELEER_SERVER_RUNTIME_DOCKERNETWORK:cameleer}
+      agenthealthport: 9464
+      healthchecktimeout: 60
+      containermemorylimit: ${CAMELEER_SERVER_RUNTIME_CONTAINERMEMORYLIMIT:512m}
+      containercpushares: ${CAMELEER_SERVER_RUNTIME_CONTAINERCPUSHARES:512}
+      routingmode: ${CAMELEER_SERVER_RUNTIME_ROUTINGMODE:path}
+      routingdomain: ${CAMELEER_SERVER_RUNTIME_ROUTINGDOMAIN:localhost}
+      serverurl: ${CAMELEER_SERVER_RUNTIME_SERVERURL:}
+      jardockervolume: ${CAMELEER_SERVER_RUNTIME_JARDOCKERVOLUME:}
+    indexer:
+      debouncems: ${CAMELEER_SERVER_INDEXER_DEBOUNCEMS:2000}
+      queuesize: ${CAMELEER_SERVER_INDEXER_QUEUESIZE:10000}
+    license:
+      token: ${CAMELEER_SERVER_LICENSE_TOKEN:}
+      file: ${CAMELEER_SERVER_LICENSE_FILE:}
+      publickey: ${CAMELEER_SERVER_LICENSE_PUBLICKEY:}
+    security:
+      accesstokenexpiryms: 3600000
+      refreshtokenexpiryms: 604800000
+      bootstraptoken: ${CAMELEER_SERVER_SECURITY_BOOTSTRAPTOKEN:}
+      bootstraptokenprevious: ${CAMELEER_SERVER_SECURITY_BOOTSTRAPTOKENPREVIOUS:}
+      uiuser: ${CAMELEER_SERVER_SECURITY_UIUSER:admin}
+      uipassword: ${CAMELEER_SERVER_SECURITY_UIPASSWORD:admin}
+      uiorigin: ${CAMELEER_SERVER_SECURITY_UIORIGIN:http://localhost:5173}
+      jwtsecret: ${CAMELEER_SERVER_SECURITY_JWTSECRET:}
+      oidcissueruri: ${CAMELEER_SERVER_SECURITY_OIDCISSUERURI:}
+      oidcjwkseturi: ${CAMELEER_SERVER_SECURITY_OIDCJWKSETURI:}
+      oidcaudience: ${CAMELEER_SERVER_SECURITY_OIDCAUDIENCE:}
+      oidctlsskipverify: ${CAMELEER_SERVER_SECURITY_OIDCTLSSKIPVERIFY:false}
+      corsallowedorigins: ${CAMELEER_SERVER_SECURITY_CORSALLOWEDORIGINS:}
+    clickhouse:
+      enabled: ${CAMELEER_SERVER_CLICKHOUSE_ENABLED:true}
+      url: ${CAMELEER_SERVER_CLICKHOUSE_URL:jdbc:clickhouse://localhost:8123/cameleer}
+      username: ${CAMELEER_SERVER_CLICKHOUSE_USERNAME:default}
+      password: ${CAMELEER_SERVER_CLICKHOUSE_PASSWORD:}
 
 springdoc:
   api-docs:
@@ -85,12 +86,6 @@ springdoc:
   swagger-ui:
     path: /api/v1/swagger-ui
 
-clickhouse:
-  enabled: ${CLICKHOUSE_ENABLED:true}
-  url: ${CLICKHOUSE_URL:jdbc:clickhouse://localhost:8123/cameleer}
-  username: ${CLICKHOUSE_USERNAME:default}
-  password: ${CLICKHOUSE_PASSWORD:}
-
 logging:
   level:
     com.clickhouse: INFO